4ef885d380a8362a2c714a3f6b934330bb37c953
[lhc/ateliers.git] / etc / dovecot / dovecot.conf.m4
1 auth_mechanisms = plain
2 auth_ssl_require_client_cert = no
3 # NOTE: ne marche pas avec l'auth SASL depuis postfix qui ne fournit pas de certificat utilisateurice
4 auth_ssl_username_from_cert = yes
5 auth_verbose = no
6 auth_debug = no
7 disable_plaintext_auth = yes
8 first_valid_uid = 1000
9 lda_mailbox_autocreate = no
10 lda_mailbox_autosubscribe = yes
11 listen = *
12 log_timestamp = "%Y-%m-%d %H:%M:%S "
13 local_name imap.LOCAL_DOMAINNAME {
14 ssl_ca = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
15 ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
16 ssl_key = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/key.pem
17 }
18 local_name imap.chatperche.org {
19 ssl_ca = </etc/dovecot/chatperche.org/imap/x509/crt+crl.self-signed.pem
20 ssl_cert = </etc/dovecot/chatperche.org/imap/x509/crt+crl.self-signed.pem
21 ssl_key = </etc/dovecot/chatperche.org/imap/x509/key.pem
22 }
23 local_name imap.cyclocoop.org {
24 ssl_ca = </etc/dovecot/cyclocoop.org/imap/x509/crt+crl.self-signed.pem
25 ssl_cert = </etc/dovecot/cyclocoop.org/imap/x509/crt+crl.self-signed.pem
26 ssl_key = </etc/dovecot/cyclocoop.org/imap/x509/key.pem
27 }
28 local_name imap.lesjantesdunord.org {
29 ssl_ca = </etc/dovecot/lesjantesdunord.org/imap/x509/crt+crl.self-signed.pem
30 ssl_cert = </etc/dovecot/lesjantesdunord.org/imap/x509/crt+crl.self-signed.pem
31 ssl_key = </etc/dovecot/lesjantesdunord.org/imap/x509/key.pem
32 }
33 local_name imap.ptitvelo.net {
34 ssl_ca = </etc/dovecot/ptitvelo.net/imap/x509/crt+crl.self-signed.pem
35 ssl_cert = </etc/dovecot/ptitvelo.net/imap/x509/crt+crl.self-signed.pem
36 ssl_key = </etc/dovecot/ptitvelo.net/imap/x509/key.pem
37 }
38 local_name imap.veli-velo.org {
39 ssl_ca = </etc/dovecot/veli-velo.org/imap/x509/crt+crl.self-signed.pem
40 ssl_cert = </etc/dovecot/veli-velo.org/imap/x509/crt+crl.self-signed.pem
41 ssl_key = </etc/dovecot/veli-velo.org/imap/x509/key.pem
42 }
43 local_name imap.wiklou.org {
44 ssl_ca = </etc/dovecot/wiklou.org/imap/x509/crt+crl.self-signed.pem
45 ssl_cert = </etc/dovecot/wiklou.org/imap/x509/crt+crl.self-signed.pem
46 ssl_key = </etc/dovecot/wiklou.org/imap/x509/key.pem
47 }
48 local_name pop.LOCAL_DOMAINNAME {
49 ssl_ca = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/crt+crl.self-signed.pem
50 ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/crt+crl.self-signed.pem
51 ssl_key = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/key.pem
52 }
53 local_name pop.chatperche.org {
54 ssl_ca = </etc/dovecot/chatperche.org/pop/x509/crt+crl.self-signed.pem
55 ssl_cert = </etc/dovecot/chatperche.org/pop/x509/crt+crl.self-signed.pem
56 ssl_key = </etc/dovecot/chatperche.org/pop/x509/key.pem
57 }
58 local_name pop.cyclocoop.org {
59 ssl_ca = </etc/dovecot/cyclocoop.org/pop/x509/crt+crl.self-signed.pem
60 ssl_cert = </etc/dovecot/cyclocoop.org/pop/x509/crt+crl.self-signed.pem
61 ssl_key = </etc/dovecot/cyclocoop.org/pop/x509/key.pem
62 }
63 local_name pop.lesjantesdunord.org {
64 ssl_ca = </etc/dovecot/lesjantesdunord.org/pop/x509/crt+crl.self-signed.pem
65 ssl_cert = </etc/dovecot/lesjantesdunord.org/pop/x509/crt+crl.self-signed.pem
66 ssl_key = </etc/dovecot/lesjantesdunord.org/pop/x509/key.pem
67 }
68 local_name pop.ptitvelo.net {
69 ssl_ca = </etc/dovecot/ptitvelo.net/pop/x509/crt+crl.self-signed.pem
70 ssl_cert = </etc/dovecot/ptitvelo.net/pop/x509/crt+crl.self-signed.pem
71 ssl_key = </etc/dovecot/ptitvelo.net/pop/x509/key.pem
72 }
73 local_name pop.veli-velo.org {
74 ssl_ca = </etc/dovecot/veli-velo.org/pop/x509/crt+crl.self-signed.pem
75 ssl_cert = </etc/dovecot/veli-velo.org/pop/x509/crt+crl.self-signed.pem
76 ssl_key = </etc/dovecot/veli-velo.org/pop/x509/key.pem
77 }
78 local_name pop.wiklou.org {
79 ssl_ca = </etc/dovecot/wiklou.org/pop/x509/crt+crl.self-signed.pem
80 ssl_cert = </etc/dovecot/wiklou.org/pop/x509/crt+crl.self-signed.pem
81 ssl_key = </etc/dovecot/wiklou.org/pop/x509/key.pem
82 }
83 mail_debug = no
84 mail_home = /home/mail/data/%d/%n
85 mail_location = maildir:/home/mail/data/%d/%n/Maildir:INDEX=/var/lib/dovecot-index/%d/%n:CONTROL=/var/lib/dovecot-control/%d/%n
86 # NOTE: INDEX et CONTROL sont sur une partition sans quota comme le demande la doc
87 # VOIR: http://wiki2.dovecot.org/Quota/FS
88 namespace inbox {
89 # NOTE: ici car protocol sieve {namespace inbox{}} n'a pas l'air de fonctionner
90 inbox = yes
91 location =
92 list = yes
93 prefix =
94 separator = +
95 }
96 namespace {
97 #list = children
98 list = yes
99 location = maildir:/home/mail/data/%%d/%%n/Maildir:INDEX=/var/lib/dovecot-index/%d/%n/Shared/%%n:CONTROL=/var/lib/dovecot-control/%d/%n/Shared/%%n
100 prefix = Partages+%%n+
101 separator = +
102 subscriptions = yes
103 type = shared
104 }
105 mail_plugins = $mail_plugins acl quota virtual
106 #mail_privileged_group = mail
107 #mail_access_groups = mail
108 passdb {
109 args = scheme=plain username_format=%n /etc/dovecot/%d/passwd
110 driver = passwd-file
111 }
112 plugin {
113 acl = vfile:/etc/dovecot/acl/global.d
114 acl_anyone = allow
115 acl_shared_dict = file:/home/mail/acl/%d/shared.db
116 #antispam_allow_append_to_spam = yes
117 # NOTE: pour offlineimap
118 antispam_backend = pipe
119 #antispam_crm_args = -u;/home/mail/data/%d/.crm114;/usr/share/crm114/mailfilter.crm
120 antispam_crm_args = -u;/home/mail/crm114;/usr/share/crm114/mailfilter.crm
121 antispam_crm_binary = /usr/bin/crm
122 antispam_debug_target = syslog
123 #antispam_crm_env = HOME=%h;USER=%u
124 antispam_ham_keywords = NonJunk
125 antispam_pipe_program = /usr/bin/crm
126 antispam_pipe_program_args = -u;/home/mail/crm114;/usr/share/crm114/mailfilter.crm;--stats_only;--force
127 antispam_pipe_program_notspam_arg = --learnnonspam
128 antispam_pipe_program_spam_arg = --learnspam
129 antispam_pipe_program_unlearn_spam_args = --unlearn;--learnspam
130 antispam_pipe_program_unlearn_notspam_args = --unlearn;--learnnonspam
131 antispam_pipe_tmpdir = /home/mail/crm114/tmp
132 antispam_signature = X-CRM114-CacheID
133 antispam_signature_missing = move
134 antispam_spam = Junk
135 antispam_spam_keywords = Junk
136 antispam_trash = Trash
137 antispam_unsure = Unsure
138 antispam_verbose_debug = 0
139 quota = maildir:User quota
140 quota_rule = *:storage=256M
141 quota_rule2 = Trash:storage=+64M
142 recipient_delimiter = +
143 sieve = /home/mail/data/%d/%n/sieve
144 sieve_after = /etc/dovecot/sieve/after.d/
145 sieve_before = /etc/dovecot/sieve/before.d/
146 sieve_dir = /home/mail/data/%d/%n/sieve.d/
147 #sieve_extensions = +spamtest +spamtestplus
148 sieve_global_dir = /etc/dovecot/sieve/global.d/
149 sieve_max_script_size = 1M
150 sieve_quota_max_scripts = 0
151 sieve_quota_max_storage = 10M
152 sieve_spamtest_max_value = 10
153 sieve_spamtest_status_header = X-Spam-Score
154 sieve_spamtest_status_type = strlen
155 sieve_user_log = /home/mail/log/%d/sieve.%n.log
156 }
157 protocol imap {
158 mail_plugins = $mail_plugins antispam imap_acl imap_quota
159 namespace inbox {
160 inbox = yes
161 location =
162 list = yes
163 mailbox Drafts {
164 special_use = \Drafts
165 }
166 mailbox Junk {
167 special_use = \Junk
168 }
169 mailbox Sent {
170 special_use = \Sent
171 }
172 mailbox "Sent Messages" {
173 special_use = \Sent
174 }
175 mailbox Trash {
176 special_use = \Trash
177 }
178 prefix =
179 separator = +
180 }
181 }
182 protocol lda {
183 auth_socket_path = /var/run/dovecot/auth-userdb
184 hostname = LOCAL_DOMAINNAME
185 info_log_path =
186 log_path =
187 mail_plugins = $mail_plugins sieve
188 namespace inbox {
189 inbox = yes
190 location =
191 list = yes
192 prefix =
193 separator = +
194 }
195 postmaster_address = postmaster+dovecot+lda@LOCAL_DOMAINNAME
196 syslog_facility = mail
197 }
198 protocol lmtp {
199 #info_log_path = /tmp/dovecot-lmtp.log
200 mail_plugins = $mail_plugins sieve
201 namespace inbox {
202 inbox = yes
203 location =
204 list = yes
205 prefix =
206 separator = +
207 }
208 postmaster_address = postmaster+dovecot+lmtp@LOCAL_DOMAINNAME
209 }
210 protocol pop3 {
211 namespace all {
212 # NOTE: utilisé par /etc/dovecot/pop3/INBOX/dovecot-virtual
213 hidden = yes
214 list = no
215 location =
216 prefix = all+
217 separator = +
218 }
219 namespace inbox {
220 # NOTE: virtual namespace for the virtual INBOX. Use a global directory for dovecot-virtual files.
221 inbox = yes
222 hidden = yes
223 list = no
224 location = virtual:/etc/dovecot/pop3:INDEX=/var/lib/dovecot-index/%d/%n/POP3:LAYOUT=fs
225 prefix = pop3+
226 separator = +
227 }
228 pop3_client_workarounds =
229 pop3_fast_size_lookups = yes
230 pop3_lock_session = yes
231 pop3_no_flag_updates = yes
232 pop3_uidl_format = %g
233 # NOTE: use GUIDs to avoid accidental POP3 UIDL changes instead of IMAP UIDs.
234 }
235 protocol sieve {
236 mail_debug = no
237 #mail_max_userip_connections = 10
238 #managesieve_implementation_string = Dovecot Pigeonhole
239 managesieve_max_compile_errors = 5
240 #managesieve_max_line_length = 65536
241 #managesieve_notify_capability = mailto
242 #managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave
243 }
244 protocols = imap lmtp pop3 sieve
245 service lmtp {
246 #executable = lmtp -L
247 process_min_avail = 2
248 unix_listener /var/spool/postfix/private/dovecot-lmtp {
249 user = postfix
250 group = postfix
251 mode = 0600
252 }
253 #user = mail
254 }
255 service auth {
256 user = root
257 unix_listener auth-userdb {
258 user = dovecot
259 group = root
260 mode = 0666
261 }
262 unix_listener /var/spool/postfix/private/auth {
263 user = postfix
264 group = postfix
265 mode = 0660
266 }
267 }
268 service imap {
269 #vsz_limit =
270 # NOTE: most of the memory goes to mmap()ing files.
271 # You may need to increase this limit if you have huge mailboxes.
272 process_limit = 1024
273 }
274 service imap-login {
275 inet_listener imap {
276 address = 127.0.0.1
277 port = 143
278 ssl = no
279 }
280 inet_listener imaps {
281 port = 993
282 ssl = yes
283 }
284 }
285 service pop3 {
286 process_limit = 1024
287 }
288 service pop3-login {
289 inet_listener pop3s {
290 port = 995
291 ssl = yes
292 }
293 }
294 ssl = required
295 ssl_ca = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
296 ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
297 ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
298 ssl_key = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/key.pem
299 ssl_verify_client_cert = yes
300 userdb {
301 driver = prefetch
302 }
303 userdb {
304 # NOTE: this userdb is only used by lda.
305 args = username_format=%n /etc/dovecot/%d/passwd
306 driver = passwd-file
307 }
308 verbose_ssl = no
309
310 # vim: ft=sh